Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add guoliang1114-boop/AriaAI --skill audit-report-draftgit clone --depth 1 https://github.com/guoliang1114-boop/AriaAIWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/guoliang1114-boop/ariaai/audit-report-draft)<a href="https://agentmods.dev/skills/guoliang1114-boop/ariaai/audit-report-draft"><img src="https://agentmods.dev/badge/skills/guoliang1114-boop/ariaai/audit-report-draft/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/guoliang1114-boop/ariaai/audit-report-draft"><img src="https://agentmods.dev/badge/skills/guoliang1114-boop/ariaai/audit-report-draft.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00041 | $0.02070 |
| Opus 5 | $0.00020 | $0.01035 |
| Sonnet 5 | $0.00008 | $0.00414 |
| Haiku 4.5 | $0.00004 | $0.00207 |
Grade A, and why
audit-report-draft scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 178 lines — stays where its author put it; the contents beside it link to each section on GitHub.
审计报告起草
When To Use
- 审计完成阶段需要出具审计报告
- 需要确定适当的审计意见类型
- 需要编制关键审计事项(KAM)部分
- 需要添加强调事项段或其他事项段
- 需要与管理层和治理层沟通过审计报告内容
Tools
search— 搜索审计结论、未更正错报、重大事项read— 读取审计调整汇总、风险评估、重要性水平write— 生成审计报告草稿edit— 修改意见措辞、更新KAM内容
Framework
意见类型决策逻辑(ISA 700第14-22条)
审计证据是否充分适当?
├── 是 → 财务报表是否在所有重大方面公允反映?
│ ├── 是 → 无保留意见(Unmodified)
│ └── 否 → 错报是否重大且广泛?
│ ├── 是 → 否定意见(Adverse)
│ └── 否 → 保留意见(Qualified)
└── 否 → 无法获取充分审计证据的原因是否重大且广泛?
├── 是 → 无法表示意见(Disclaimer)
└── 否 → 保留意见(Qualified)
无保留意见(ISA 700第24-28条)
- 财务报表在所有重大方面按照适用的财务报告编制基础编制
- 审计师已获取充分、适当的审计证据
- 不存在需要修改意见的事项
保留意见(ISA 700第29-33条)
- 存在错报或范围受限,但影响重大但不广泛
- 在意见段前增加"形成保留意见的基础"段
- 使用"除……的影响外"措辞
否定意见(ISA 700第34-36条)
- 错报重大且广泛
- 在意见段前增加"形成否定意见的基础"段
- 使用"由于……的影响,财务报表未能在所有重大方面公允反映"措辞
无法表示意见(ISA 700第37-40条)
- 无法获取充分、适当的审计证据,且影响重大且广泛
- 在意见段前增加"形成无法表示意见的基础"段
- 使用"由于……,我们无法对财务报表发表审计意见"措辞
- 不得在无法表示意见的审计报告中包含KAM
关键审计事项(ISA 701)
- 从与治理层沟通的事项中识别最重要的事项
- 考虑重大错报风险最高的领域
- 考虑涉及重大管理层判断的领域
- 考虑对财务报表有重大影响的交易或事项
- 描述KAM:事项、审计应对及结果
强调事项段(ISA 706第6-8条)
- 不影响审计意见的类型
- 用于提醒使用者关注已在财务报表中恰当列报或披露的事项
- 常见情形:重大不确定性、持续经营、重大会计政策变更
其他事项段(ISA 706第9-11条)
- 用于沟通与使用者理解审计工作相关的事项
- 不影响审计意见
Workflow
- 汇总审计结论和发现的所有重大事项
- 运用决策逻辑确定适当的审计意见类型
- 识别并描述关键审计事项
- 判断是否需要添加强调事项段或其他事项段
- 起草审计报告全文
- 与管理层和治理层沟通报告内容
- 最终定稿并出具
Output Format
# 审计报告
## 审计意见
我们审计了[被审计单位名称]的财务报表,包括[日期]的资产负债表,[期间]的利润表、现金流量表、所有者权益变动表以及相关财务报表附注。
我们认为,后附的财务报表在所有重大方面按照[适用的财务报告编制基础]编制,公允反映了[被审计单位名称][日期]的财务状况以及[期间]的经营成果和现金流量。
[如为保留/否定/无法表示意见,在此段前增加"形成意见的基础"段]
## 形成审计意见的基础
[如适用,描述导致保留/否定/无法表示意见的事项]
## 关键审计事项
关键审计事项是我们根据职业判断,认为对本期财务报表审计最为重要的事项。这些事项是在对财务报表整体进行审计并形成意见的背景下进行处理的,我们不对这些事项提供单独的意见。
### [关键审计事项1标题]
**事项描述:**
[描述该事项为何被认定为关键审计事项]
**审计应对:**
[描述针对该事项执行的具体审计程序]
**审计结论:**
[描述审计程序的结果和结论]
### [关键审计事项2标题]
[同上格式]
## 强调事项段(如适用)
我们提醒财务报表使用者关注,如财务报表附注[X]所述,[描述需要强调的事项]。该事项不影响已发表的审计意见。
## 管理层和治理层对财务报表的责任
[描述管理层编制财务报表的责任和治理层监督财务报告过程的责任]
## 审计师对财务报表审计的责任
[描述审计师的责任,包括按照审计准则执行审计工作]
[审计师签名]
[审计报告日期]
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 178 lines · 41 tokens per session scan A deb92b79ab13
audit-report-draft is a skill published in the GitHub repository guoliang1114-boop/AriaAI (37 stars, last pushed 3d ago), licensed MIT. It adds 41 tokens to every session and 2,070 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
domain_aml
Guidance for monitoring cross-border payments for money laundering and sanctions risks. It explains terms such as suspicious transactions and watchlists, which can include sanctioned people or politically exposed persons.
fin-audit-support
Support SOX 404 compliance with control testing methodology, sample selection, and documentation standards. Use when generating testing workpapers, selecting audit samples, classifying control deficiencies, or preparing for internal or external audits.
fin-sox-testing
Generate SOX sample selections, testing workpapers, and control assessments. Use when planning quarterly or annual SOX 404 testing, pulling a sample for a control (revenue, P2P, ITGC, close), building a testing workpaper template, or evaluating and classifying a control deficiency.
fin-journal-entry
Prepare journal entries with proper debits, credits, and supporting detail. Use when booking month-end accruals (AP, payroll, prepaid), recording depreciation or amortization, posting revenue recognition or deferred revenue adjustments, or documenting an entry for audit review.
regulatory_filing
Parse and retrieve SEC/FINRA filings for an entity.
expense-review-policy
Review invoices and contracts against accounts-payable policy before human approval.